dieter@dkluenter.de wrote:
man slapo-ppolicy(5) says that the overlay depends on objectclass pwdPolicy and Every account that should be subject to password policy control should have pwdPolicySubentry... But ppolicy is controlling every enty, even those without attribute pwdPolicy and attribute pwdPolicySubentry. I have created a test entry, which is not subject to password policy but got locked out after 3 binds with wrong password.
Do you have 'ppolicy_default' set in slapd.conf? What happens if you remove that?
Ciao, Michael.